1. Introduction

Hype & Swagger Ltd. ("we," "our," or "us") operates Ovexo, a platform that helps content creators connect with brands for partnership opportunities. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service, including data from social media platforms you choose to connect.

By using our service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, do not use our service.

2. Information We Collect

2.1 Social Media Account Information

When you connect your social media accounts (including but not limited to Instagram, TikTok, YouTube, Facebook, Twitter/X, LinkedIn, and any future platforms we may support), we collect:

• Profile Information: Username, display name, profile picture, bio/description, account type (business/creator/personal), verification status
• Content Data: Posts, videos, images, captions, hashtags, publication dates, content performance metrics
• Engagement Metrics: Follower count, following count, likes, comments, shares, views, engagement rates, reach, impressions
• Audience Data: Demographics, interests, geographic locations (aggregated and anonymized), audience insights
• Account Insights: Performance analytics, best posting times, content recommendations, growth trends
• Business Account Data: Business contact information, business category, location data (for business accounts)

2.2 Account and Profile Data

Information you provide directly:

• Email address, name, and contact information
• Workspace and team information
• Profile preferences and settings
• Payment and billing information (processed securely through Stripe)
• Communication preferences and marketing consent

2.3 Usage Data

• How you interact with our service and features
• Pages visited, features used, and actions taken
• Device information (browser type, operating system, IP address)
• Cookies and similar tracking technologies
• Session data and user preferences

2.4 Third-Party Data

• Brand contact information obtained through our partners (Apollo, Hunter.io, Exa)
• AI-generated insights and recommendations
• Email communication data and outreach tracking
• Media pack generation and download analytics

3. How We Use Your Information

We use the information we collect to:

• AI-Powered Brand Matching: Analyze your content, audience, and engagement across all connected platforms to recommend relevant brand partnerships. When YouTube is connected, all AI processing is routed through Google Gemini. When YouTube is not connected, we use OpenAI and Perplexity.
• Media Pack Generation: Create professional media kits showcasing your social media performance, audience demographics, and content examples using PDFShift and our proprietary templates
• Brand Contact Discovery: Find and verify contact information for brand partnership managers using third-party services (Apollo, Hunter.io, Exa) to facilitate outreach
• Outreach Automation: Generate personalized outreach emails and track communication with potential brand partners
• Performance Analytics: Provide comprehensive insights into your social media performance across all connected platforms
• Service Improvement: Enhance our features, user experience, and recommendation algorithms based on usage patterns
• Customer Support: Respond to your questions, provide technical assistance, and resolve issues
• Security and Fraud Prevention: Protect against unauthorized access, fraud, and other security threats
• Legal Compliance: Comply with applicable laws, regulations, and platform terms of service
• Communication: Send you service updates, marketing communications (with consent), and important notices

4. Social Media Platform Data Usage

We comply with the terms of service and data usage policies of all social media platforms we integrate with. Your social media data is used solely to provide our service and is never sold to third parties.

4.1 Platform-Specific Data Handling

Instagram

We access your Instagram Business or Creator account data through Meta'client acquisitions official Instagram API with Instagram Login. We collect:

• Profile information (username, bio, follower count, profile picture)
• Media content (posts, stories, reels) and performance metrics
• Business insights and audience demographics
• We do not access personal Instagram accounts that are not Business or Creator accounts

TikTok

We use TikTok'client acquisitions official API to access business account data:

• Creator profile and statistics
• Video performance metrics and engagement data
• Audience insights and demographics

YouTube

We access YouTube channel data through Google'client acquisitions official YouTube Data API:

• Channel information and subscriber count
• Video metadata and performance analytics
• Audience demographics and engagement metrics

Google API Data Protection (Limited Use Compliance)

Ovexo's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

To ensure compliance with Google'client acquisitions Limited Use requirements:

• AI Processing: When YouTube is connected to your account, all AI processing for your entire audit (including any other connected platforms) is routed through Google Gemini, Google's enterprise AI platform. This ensures your YouTube data remains within Google's governed infrastructure and is never used for third-party model training.
• Data Isolation: When YouTube data is present, no data from that session is sent to non-Google AI providers. Our system automatically detects when YouTube is connected and routes all AI processing to Google Gemini.
• No Third-Party Training: Your YouTube data is never used to train, improve, or develop AI models outside of Google'client acquisitions ecosystem.
• Limited Use: We only use YouTube data to provide and improve our service features for you, such as audience analytics, brand matching, and media pack generation.
• No Selling: We never sell YouTube data or use it for purposes unrelated to providing our service.

Other Platforms

For Twitter/X, LinkedIn, Facebook, and any future platforms:

• We use official APIs provided by each platform
• We comply with their respective data policies and terms of service
• We collect only the data necessary for our service functionality
• We respect platform-specific data usage limitations

4.2 Data Disconnection and Deletion

You can disconnect any social media account at any time through your account settings. When you disconnect an account, we will delete the associated data within 30 days, except where we are required to retain it for legal or security purposes.

5. Third-Party Services

We use the following third-party services to provide our features:

• Google Gemini: For AI-powered analysis when YouTube is connected. When YouTube data is present, all AI processing (including data from other platforms in that session) is routed through Google Gemini to ensure compliance with Google'client acquisitions Limited Use requirements.
• OpenAI: For AI-powered content analysis, brand matching, and text generation when YouTube is not connected.
• Perplexity: For AI-powered research and market intelligence when YouTube is not connected.
• PDFShift: For generating professional PDF media packs from your social media data
• Apollo.io: For discovering brand contact information and company data
• Hunter.io: For email verification and discovery services
• Exa: For brand research and contact discovery using AI search
• Stripe: For secure payment processing and subscription management
• Vercel: For hosting, infrastructure, and performance monitoring
• Email Service Providers: For sending outreach emails, notifications, and marketing communications
• Analytics Providers: For understanding usage patterns and improving our service

These services may process your data according to their own privacy policies. We carefully select service providers that maintain high security and privacy standards and require them to implement appropriate safeguards.

6. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contract Performance: To provide the services you have requested and to fulfill our contractual obligations
• Legitimate Interests: To improve our services, prevent fraud, ensure security, and conduct business analytics
• Consent: For marketing communications, optional features, and processing of sensitive data
• Legal Compliance: To comply with applicable laws and regulations
• Vital Interests: To protect your safety and the safety of others

7. Data Retention

We retain your information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations
• Resolve disputes and enforce our agreements
• Protect against fraud and abuse
• Maintain business records as required by law

Retention Periods:

• Account Data: Retained until account deletion plus 30 days
• Social Media Data: Refreshed periodically; historical data retained for up to 2 years for analytics
• Usage Data: Retained for up to 3 years for service improvement
• Communication Records: Retained for up to 7 years for legal compliance
• Payment Data: Retained as required by payment processors and tax authorities

When you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law or for legitimate business purposes (such as fraud prevention).

8. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information ("right to be forgotten")
• Data Portability: Request your data in a structured, machine-readable format
• Objection: Object to our processing of your personal information
• Restriction: Request restriction of processing in certain circumstances
• Withdraw Consent: Withdraw consent for data processing at any time
• Disconnect Accounts: Disconnect any social media account from your profile
• Opt-out of Marketing: Unsubscribe from marketing communications

8.1 California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights:

• Right to know what personal information is collected and how it'client acquisitions used
• Right to delete personal information
• Right to correct inaccurate personal information
• Right to opt-out of the sale or sharing of personal information
• Right to limit the use of sensitive personal information
• Right to non-discrimination for exercising privacy rights

We do not "sell" personal information in the traditional sense. However, we may share information with service providers as described in this policy.

8.2 Exercising Your Rights

To exercise these rights, please contact us at hello@ovexo.ai or through your account settings. We may verify your identity before responding to protect your privacy and security.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption: Data encrypted in transit and at rest using industry-standard protocols
• Access Controls: Role-based access controls and multi-factor authentication
• Regular Security Assessments: Ongoing security audits and vulnerability assessments
• Secure Infrastructure: Hosting with reputable cloud providers with SOC 2 compliance
• Employee Training: Regular training on data protection and security best practices
• Incident Response: Procedures for detecting, responding to, and recovering from security incidents

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. We encourage you to use strong passwords and keep your devices secure.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States where our servers are located. We ensure that such transfers comply with applicable data protection laws through:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions by relevant data protection authorities
• Certification schemes and codes of conduct
• Other appropriate safeguards as required by law

By using our service, you consent to the transfer of your information to countries that may not have the same data protection laws as your country.

11. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience:

• Essential Cookies: Required for basic functionality and security
• Performance Cookies: Help us understand how you use our service
• Functional Cookies: Remember your preferences and settings
• Marketing Cookies: Used for targeted advertising (with your consent)

You can control cookies through your browser settings, but disabling certain cookies may limit functionality. We also use local storage and session storage for temporary data and user preferences.

12. Children'client acquisitions Privacy

Our service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If you believe we have collected information from a child under 18, please contact us immediately at hello@ovexo.ai and we will take steps to delete such information.

If you are under 18, please do not use our service or provide any personal information to us.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Post the updated policy on our website with a new "Last Updated" date
• Notify you by email or through a notice on our service
• Obtain your consent where required by law
• Provide a summary of material changes

Your continued use of the service after changes constitutes acceptance of the updated policy. If you do not agree with the changes, you should discontinue use of our service.

14. Contact Us

If you have questions about this Privacy Policy, our data practices, or want to exercise your rights, please contact us:

For users in the European Union, you also have the right to lodge a complaint with your local data protection authority if you believe we have not addressed your concerns adequately.